Security & Data Handling
How CostTrak's current architecture handles your data. Effective September 28, 2026.
Data storage
Application data is stored in a managed PostgreSQL database. Row-level security is enabled on every table, and the application connects through a dedicated backend service rather than exposing the database directly to clients.
Encryption in transit
CostTrak is served over HTTPS. Traffic between your browser and CostTrak's servers is encrypted in transit.
Authentication
Passwords are hashed before storage and are never stored in plain text. API access uses signed, time-limited bearer tokens issued at login.
Access controls
Data is scoped per organization. Customer portal accounts can only access their own jobs and quotes; internal roles (owner, admin, staff) control access to settings, analytics, and admin tools within an organization.
Third-party service providers
CostTrak runs on Vercel for hosting and a managed PostgreSQL provider for the database. When configured, job photo uploads use Vercel Blob storage, and automated estimating tools provided by a third-party service (Anthropic) process job text and photos to generate suggested prices and take-off.
Payments and card data
CostTrak does not store bank credentials or card numbers. You can create and share invoice PDFs. Optional online invoice payments, when a contractor connects their own Stripe account, go through Stripe.
Does CostTrak sell customer data?
No. CostTrak does not sell customer or contractor data to third parties.
Data export
Quotes and invoices can be exported as PDF today. Broader account data export (CSV/JSON) is planned but not yet available.
Account deletion
Delete your personal account at the account deletion page after signing in. The account is deactivated immediately and permanently deleted within 30 days. Device sessions are revoked right away. Contact support@corelogyx.com within that window to restore the account. Organization-owned records remain unless a sole owner confirms organization deletion.
Reporting a security issue
Reach us through support@corelogyx.com with details of the issue. We investigate every report.